Privacy Policy

Last updated: July 20, 2026

Who we are

Vonca ("we") operates vonca.ai, a closed-loop AI visibility platform. Contact: info@vonca.ai.

What we collect

Account data: email address and password (hashed) when you create an account. Workspace data: the domain you connect, the questions you track, scan results and drafts generated for you. Free scan: the domain and category you enter, processed transiently to produce your result. Usage data: standard server logs and, where enabled, Google Analytics 4 (cookies) for aggregate site analytics. Payments: handled entirely by Lemon Squeezy as merchant of record — we never see or store your card details.

How we use it

To run your scans, generate drafts, show your dashboard, bill your subscription, and improve the product. We do not sell personal data, and we do not use your content to train AI models.

Sub-processors

Supabase (database & auth, EU region — Frankfurt), Vercel (hosting), OpenRouter (AI model routing for scans and drafts), Lemon Squeezy (payments, merchant of record), Google (Analytics, Search Console integration where you connect it), Resend (transactional email).

Cookies

Essential cookies for authentication, and Google Analytics 4 cookies for aggregate analytics. You can block analytics cookies in your browser without affecting core functionality.

Data retention & your rights

Account and workspace data are retained while your account is active and deleted within 30 days of a verified deletion request. Under GDPR and KVKK you may request access, correction, export or deletion of your personal data at any time: info@vonca.ai. Data is stored in the EU (Frankfurt).

Security

Row-level tenant isolation, encrypted transport (HTTPS), least-privilege access, and rate limiting. To report a vulnerability, see security.txt or email info@vonca.ai.

Changes

We will post any changes to this policy on this page with an updated date.